IPsec Configuration Example

 
Note: The I.P addresses configured between the routers are in the format of 192.168.x.x/24 for routers.

In this setup, the connectivity of the 4 routers R1, R2, R3 and R4 is established using a dynamic routing protocol i.e. OSPF. Once the connectivity is established PC1 is able to ping PC2.

The IPsec tunnel configuration is done at R1 and R4.

The encryption and hash algorithm used is “aes128” and “sha512” for esp-group and ike-group.

The Authentication mode used is pre-shared-secret.

The Authentication key used is 123456.

IPsec interface at R1 is eth1 and at R4 is eth3.

The local-address at R1 is configured to 192.168.12.1 and at R4 it is 192.168.34.4.

The local prefix is configured to 10.10.10.0/24 for R1 and at R4 it is 40.40.40.0/24.

The remote prefix is configured to 40.40.40.0/24 for R1 and at R4 it is 10.10.10.0/24.

Post configuring the routers, IPsec tunnel is established between the routers and PCs are able to communicate with each other in encrypted format.
 
The above mentioned features are offered and supported by VCL-MX-50xx family of IP/MPLS Routers.